Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS53356.roa
File: AS53356.roa (raw, json)
Hash identifier: hX0kvsKpIxnh0wZJfUVmgO2Ox83ZplAZVkP5l2OvTEI=
Subject key identifier: 8C:47:48:A2:0A:EA:3B:1F:DF:4B:8F:96:1B:85:83:DC:BE:25:F8:D6
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 02F8796BA25D81ACAA309CE9FE96C09DCFEB92B6
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS53356.roa
Signing time: Thu 31 Aug 2023 07:52:05 +0000
ROA not before: Thu 31 Aug 2023 07:47:05 +0000
ROA not after: Thu 29 Aug 2024 07:52:05 +0000
asID: 53356
IP address blocks: 157.254.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f8:79:6b:a2:5d:81:ac:aa:30:9c:e9:fe:96:c0:9d:cf:eb:92:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Aug 31 07:47:05 2023 GMT
Not After : Aug 29 07:52:05 2024 GMT
Subject: CN=8C4748A20AEA3B1FDF4B8F961B8583DCBE25F8D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:51:f2:e4:05:f1:50:7d:ec:ad:5d:39:81:
b9:5b:30:7d:e5:60:50:60:1f:a5:c0:09:a4:95:55:
ee:d3:4a:14:a8:b7:af:a0:75:77:bc:86:ed:61:c5:
4f:1f:d1:7d:36:42:1a:07:8b:17:f6:5c:53:31:42:
26:5c:03:e0:57:aa:dc:45:4f:ad:41:11:46:58:8d:
92:af:c1:90:56:41:61:9a:a8:7a:1c:a2:df:d6:10:
52:e2:7c:34:4f:a8:e7:13:71:0c:c5:18:3e:95:be:
fd:6d:28:54:a8:29:f5:b2:98:7c:c6:9d:9f:f0:fd:
27:5a:d6:86:c9:95:ec:bc:91:88:2d:00:7c:ef:f9:
e8:d3:81:8c:4f:23:53:da:62:2d:b6:e3:95:42:84:
f8:60:fc:83:de:c8:94:fb:6d:c3:66:1d:f8:7f:bd:
6b:01:15:f0:1d:2d:e1:6b:6f:82:7d:4a:e8:88:f6:
70:33:fc:8d:9f:d1:52:12:33:f6:dc:c2:00:04:ee:
89:49:38:de:6f:9a:ba:c5:fa:88:1a:a2:f8:52:6e:
12:d7:1e:c3:ed:fd:18:87:49:2f:ce:cb:7c:d3:7c:
5a:0c:2b:a2:94:78:cf:51:71:30:48:e1:d4:62:38:
7b:13:44:32:19:1c:db:64:f7:8c:3a:1c:e1:bb:c4:
48:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:47:48:A2:0A:EA:3B:1F:DF:4B:8F:96:1B:85:83:DC:BE:25:F8:D6
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS53356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ed:a4:bb:5c:7d:6e:ad:4a:e7:eb:f2:be:f7:1d:62:cf:e0:
0a:53:5c:b3:0f:b7:8c:c2:9f:9f:40:78:3c:12:d8:a7:fe:64:
e4:e8:e9:05:a6:d7:36:3d:78:49:74:8c:90:2c:91:0c:85:78:
a0:b6:e7:e1:19:28:a6:7a:ee:0b:a9:a5:06:db:be:87:40:a9:
37:f9:79:d7:38:12:b6:4b:a5:36:7c:0e:60:9c:b0:d0:36:22:
ae:59:ec:63:8f:70:5f:a5:c7:ce:61:4b:55:25:e9:9d:58:f7:
b6:b7:7c:a9:49:96:40:be:33:db:f8:7c:af:a4:70:ef:84:78:
67:b7:26:c6:67:cc:c1:12:86:68:a3:54:e3:a1:35:11:7f:bd:
e5:fd:af:f7:ac:96:e5:3d:20:e4:29:93:7b:32:5f:08:89:9a:
61:f5:f9:a7:f9:9e:b4:66:82:89:ca:5d:ad:8a:41:8d:23:16:
3c:6a:cc:41:90:5b:e5:31:3c:8c:de:1c:59:ff:1f:b3:79:95:
31:18:3d:5f:42:11:7d:05:ad:3c:11:78:94:ab:65:fa:7a:41:
23:52:5d:b0:04:b4:cd:18:5b:2b:db:0e:53:02:48:7f:96:62:
4b:e6:5d:b8:d1:e6:b2:29:aa:b9:7d:2c:af:36:29:46:57:ea:
c9:ef:82:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org